Cyber Security Engineer III

About the role

Blue Origin’s In‑Space Systems business unit focuses on space infrastructure and on‑orbit mobility. The Blue National Security team builds and operates classified space systems for the Intelligence Community and Department of Defense, requiring secure, accredited, and continuously available environments. The Cybersecurity Engineer III will engineer and harden these systems, drive them through accreditation, and maintain operational security.

Responsibilities

• Engineer and harden security architecture across classified enclaves, mission ground systems, and lab environments, including network segmentation, identity and access management, endpoint hardening, logging, audit, and encryption at rest and in transit.
• Drive accreditation by authoring and maintaining System Security Plans (SSPs), security control implementation statements, risk assessments, and POA&Ms; take systems through RMF to ATO/ATC and ensure continuous monitoring.
• Defend the environment through vulnerability scanning, remediation, patch management, log review, audit reduction, and triage of security events alongside the enterprise SOC.
• Respond to incidents as part of an on‑call rotation: investigate, contain, document, and drive corrective actions to closure with system owners.
• Automate compliance evidence, STIG application, and reporting by building scripting and tooling.
• Support mission engineers and system administrators to deliver secure systems on schedule, finding compliant paths to success.
• Mentor junior engineers and analysts, and contribute to team standards, baselines, and accreditation playbooks.

Minimum Qualifications

• Bachelor’s degree in a technical discipline (Computer Science, Cybersecurity, Computer/Electrical Engineering, or similar) or equivalent experience.
• 4+ years of hands‑on cybersecurity engineering experience.
• Direct experience implementing and sustaining security controls on classified systems in DoD or IC environments.
• Working experience with RMF control implementation, SSP and artifact development, POA&M remediation, and continuous monitoring.
• Hands‑on depth in at least three of the following: Linux and Windows hardening (STIG/SCAP), network security and segmentation, IAM and PKI, government cloud (AWS GovCloud / Azure Government), SIEM and log analysis, vulnerability management tooling.
• Scripting proficiency (Python, PowerShell, Bash) for automation of security operations and compliance tasks.
• Active U.S. Government Top Secret clearance with SCI eligibility and eligibility for SAP access determination.
• DoD 8140 IAT/IAM Level II certification (Security+ CE or equivalent) at hire.

Preferred Qualifications

• Prior ISSO or ISSE role on SAP/SAR programs.
• Working knowledge of JSIG, ICD 503/705, and NIST SP 800‑53 / 800‑171.
• Experience standing up and accrediting new classified enclaves, labs, or facilities.
• Infrastructure‑as‑code and configuration‑management experience (Terraform, Ansible, Puppet).
• Cross‑domain solution implementation or accreditation support.
• Detection engineering, threat hunting, or incident‑response experience.
• Active TS/SCI with polygraph, SAP eligible.

Why This Role

Most senior cyber‑engineering jobs in this space are compliance‑focused titles. This position blends true engineering with compliance, allowing you to build baselines, automation, detection coverage, and accreditation playbooks from the ground up. Your work will go operational on real national‑security missions quickly.

Schedule

• Primarily onsite in classified spaces; limited telework by nature of the work.
• Travel up to 10–15 % to other Blue Origin sites and customer facilities.
• Participation in an on‑call rotation; occasional extended hours to support mission‑critical events and incident response.

Pay

Base Pay Range: Colorado applicants $110,938.00 – $155,312.85; Washington applicants $121,023.00 – $169,432.20. Other site ranges may differ.

Benefits

• Medical, dental, vision, basic and supplemental life insurance.
• Paid parental leave.
• Short‑ and long‑term disability.
• 401(k) with company match up to 5 %.
• Education Support Program.
• Stock options for regular employees working at least 20 hours/week.
• Paid Time Off: up to four weeks per year based on scheduled hours, plus up to 14 company‑paid holidays.
• Potential bonuses and additional benefits based on role type, job level, and company discretion.

Applicants must be U.S. citizens, nationals, permanent residents, or lawfully admitted refugees/asylees.